Open-source repository malware sows Havoc

As part of the ReversingLabs research team's ongoing surveillance of open source repositories, we have identified aabquerys, a malicious npm package that downloads second and third stage malware payloads to systems that have downloaded and run the npm package. 

downloads havoc malicious malicious npm malware npm npm package npm security open source package repositories repository research reversinglabs run software supply chain security stage surveillance systems team third threat research